>> TAG: #0day

Linux/x86 – Reverse TCP /bin/sh Shell (127.1.1.1:8888/TCP) Null-Free Shellcode (67/69 bytes)

GetGo Download Manager 5.3.0.2712 – ‘Proxy’ Buffer Overflow

Microsoft Windows win32k – Using SetClassLong to Switch Between CS_CLASSDC and CS_OWNDC Corrupts DC Cache

Ayukov NFTP FTP Client 2.0 – Buffer Overflow (Metasploit)

Gespage 7.4.8 – SQL Injection

VMware Workstation – ALSA Config File Local Privilege Escalation (Metasploit)

Linksys WVBR0-25 – User-Agent Command Execution (Metasploit)

Xplico – Remote Code Execution (Metasploit)

WordPress Plugin Smart Google Code Inserter < 3.5 – Authentication Bypass / SQL Injection

Spectre – Trick Error-Free Applications Into Giving Up Secret Information